Halborn primary sources — 2026-04-30

Project status in this pass

• No canonical standalone whitepaper or litepaper surfaced.
• The clearest current source of truth is the official site plus the public GitHub identity and PublicReports archive.

Primary-source snapshots

1) Official homepage

• URL: https://www.halborn.com/
• Key excerpt:
  • The homepage title frames Halborn around “Digital Asset and Blockchain Security Solutions.”
  • The readable content foregrounds Smart Contract Assessment, Blockchain Layer 1 Assessment, Code Security Audit, Web Application Penetration Testing, Cloud Infrastructure Penetration Testing, Red Team Exercise, AI Red Teaming, and AI Security Assessment.
  • Even from the marketing surface alone, Halborn presents itself as a broad security provider for blockchain operators rather than a single-product audit vendor.

2) Audits page

• URL: https://www.halborn.com/audits
• Key excerpt:
  • The accessible page content again foregrounds the same security-service taxonomy, with particular emphasis on smart contracts and blockchain foundations.
  • This reinforces that the audits/report surface is central to Halborn’s public identity.

3) GitHub profile

• URL: https://github.com/HalbornSecurity
• Supporting API: https://api.github.com/users/HalbornSecurity
• Key excerpt:
  • The GitHub bio says “ELITE CYBERSECURITY FOR BLOCKCHAIN COMPANIES.”
  • The profile lists halborn.com, shows an active public account, and exposes a small but clearly crypto-oriented public repo set.
  • This is useful because it clarifies Halborn is not just marketing blockchain services; it maintains a public security footprint around them.

4) Public repositories listing

• URL: https://api.github.com/users/HalbornSecurity/repos?per_page=100
• Key excerpt:
  • The public repos include PublicReports, CTFs, burp-eth, Security-Best-Practices-for-Cadence-Developers-Flow-, and other security-oriented artifacts.
  • This mix suggests Halborn publishes not only client-facing reports but also training material and protocol-specific security tooling/content.

5) PublicReports repository metadata

• URL: https://api.github.com/repos/HalbornSecurity/PublicReports
• Key excerpt:
  • The PublicReports repo is a distinct public artifact with notable public engagement and an updated default branch.
  • Even without a README surfaced in this pass, the repo metadata confirms the report archive is an intentional public surface rather than an incidental dump.

6) PublicReports top-level contents

• URL: https://api.github.com/repos/HalbornSecurity/PublicReports/contents
• Key excerpt:
  • The top-level directories include Algorand Smart Contract Audit, Casper Smart Contract Audits, Cloud Security, CosmWasm Smart Contract Audits, Cosmos Audits, Financial Pentesting, Incident Reports, L1 Audits, Move Smart Contract Audits, NEAR Smart Contract Audits, Node Audits, Protocol Wallet Pen Tests, Solana Program Audit, Solidity Smart Contract Audits, Soroban Smart Contract Audits, Substrate Audits, Tezos Smart Contact Audits, Web Pentest, and ZK Audits.
  • This category spread is the strongest evidence in this pass that Halborn operates as multi-surface security infrastructure for crypto systems, wallets, nodes, protocols, and supporting environments.

Working conclusion

Halborn is best cataloged as a blockchain-security and audit-report infrastructure provider with a broader offensive-security and incident-response footprint. The public report taxonomy matters: it shows coverage across execution environments, protocol layers, and operational-security surfaces rather than only EVM contract reviews.